CVE-2004-2263

CVE-2004-2263 describes a SQL injection vulnerability in the valid function of the PlaySMS project (fr_left.php) up to version 0.7, exploitable by tampering with the vc2 cookie to modify SQL statements. The CVSS base score is 7.5 (HIGH) with network access, low attack complexity, and no authentic...

CVE-2005-0264

The CVE-2005-0264 vulnerability affects Owl (intranet engine) versions 0.7 and 0.8. It is a cross-site scripting (XSS) issue in browse.php, exploitable via the (1) expand or (2) order parameters, allowing remote attackers to inject arbitrary scripts or HTML into pages viewed by other users. The u...

CVE-2005-0265

The CVE concerns OWL, specifically browsers.php in OWL 0.7 and 0.8, where multiple SQL injection flaws exist in the browse.php handler. The vulnerabilities allow remote attackers to submit crafted values via the (1) parent or (2) sortposted parameters, potentially causing arbitrary SQL execution ...

CVE-2005-0264

Multiple cross-site scripting XSS vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 expand or 2 order parameter...

CVE-2004-2158

SQL injection vulnerability in Serendipity 0.7-beta1 allows remote attackers to execute arbitrary SQL commands via the entryid parameter to 1 exit.php or 2 comment.php...

[Full-Disclosure] myServer 0.7 Directory Traversal Vulnerability

myServer 0.7 Directory Traversal Vulnerability .oO Overview Oo. myServer version 0.7 shows files and directories that reside outside the normal web root directory. Discovered on 2004, September 07th Vendor: Myserver http://www.myserverproject.net/forum/portal.php MyServer is a free, powerful web...

myserver 0.7 - Directory Traversal

myserver 0.7 - Directory Traversal source: https://www.securityfocus.com/bid/11189/info MyServer is reported prone to a remote directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This vulnerability results in improper access to...

myserver 0.7 - Directory Traversal

source: https://www.securityfocus.com/bid/11189/info MyServer is reported prone to a remote directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This vulnerability results in improper access to potentially sensitive files located...

myServer07.txt

myServer 0.7 Directory Traversal Vulnerability .oO Overview Oo. myServer version 0.7 shows files and directories that reside outside the normal web root directory. Discovered on 2004, September 07th Vendor: Myserver http://www.myserverproject.net/forum/portal.php MyServer is a free, powerful web...

PlaySMS <= 0.7 SQL Injection Exploit

Exploit for linux platform in category remote exploits ==================================== PlaySMS new Proto = "tcp", PeerAddr = $host, PeerPort = "80" ; unless $remote die "cannot connect to http daemon on $host" print "connected "; $remote-autoflush1; my $http = "GET /playsms/frleft.php HTTP/1...

PlaySms 0.7 - SQL Injection

PlaySms 0.7 - SQL Injection !/usr/bin/perl PlaySMS version 0.7 and prior SQL Injection PoC Written by Noam Rathaus of Beyond Security Ltd. use IO::Socket; use strict; my $host = $ARGV0; my $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = "80" ; unless $remote die "cannot...

PlaySms 0.7 - SQL Injection

!/usr/bin/perl PlaySMS version 0.7 and prior SQL Injection PoC Written by Noam Rathaus of Beyond Security Ltd. use IO::Socket; use strict; my $host = $ARGV0; my $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = "80" ; unless $remote die "cannot connect to http daemon on...

MyServer 0.4.3 / 0.7 Crafted Traversal Arbitrary File Access

This web server is running MyServer See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title, added VDB refs, changed family 4/20/009 include"compat.inc"; ifdescription scriptid11851; scriptversion "1.16"; scriptcveid"CVE-2004-2516"; scriptbugtraqid11189;...

CVE-2003-0495

The CVE-2003-0495 entry concerns LedNews 0.7 with a cross-site scripting (XSS) flaw that lets an attacker inject arbitrary web script via a news item. The vulnerability is described as enabling the execution of malicious HTML/JavaScript in victims’ browsers, potentially enabling cookie theft or o...

ATFTP 0.7 - Timeout Command Line Argument Local Buffer Overflow

source: https://www.securityfocus.com/bid/7902/info atftp is prone to a locally exploitable buffer overflow condition. This issue is due to insufficient bounds checking performed on input supplied to the command line parameter -t for "timeout". Local attackers may exploit this condition to execut...

Achievo 0.7/0.8/0.9 - Remote File Inclusion / Command Execution

source: https://www.securityfocus.com/bid/5552/info Achievo includes a PHP script which is used to generate JavaScript class.atkdateattribute.js.php. This script employs a number of PHP includeonce statements to call code contained in function libraries and grab configuration information. Attacke...

CVE-2001-1345

The CVE concerns bctool in Jetico BestCrypt 0.7 and earlier, which trusts a user-supplied PATH to locate and execute an fsck utility. This PATH manipulation allows local users to gain privileges by renaming or placing a Trojan horse program earlier in PATH. Affected component: bctool within Jetic...

CVE-2001-0458

CVE-2001-0458 : Multiple buffer overflows in ePerl prior to 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands. Mandrake and Debian advisories note upgrades to 2.2.14-0.7 (or later) fix the issue; other references corroborate the vulnerability in ePerl.

CVE-2001-0480

CVE-2001-0480 involves a directory traversal vulnerability in Alex’s FTP Server 0.7 . An attacker can read arbitrary files by sending a modified dot dot sequence in either the GET or CD commands, exploiting improper path handling. The connected records confirm the affected product/version and the...